Announcement

Collapse
No announcement yet.

Compare Files

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Compare Files

    Hello,
    recently the files of a customer were renamed and encrypted by a cryptolocker ransomware.

    To recover these files I wanted to use BC4 in folder-compare-mode with an alignment override, but i didn't got it working.
    One sample file name would be the following:
    unencrypted: abc.txt
    encrypted: abc.txt.id-F8C2FDE8.[mx.jax@aol.com].wallet

    For future use it would be nice to know how to configure the alignment override correctly.
    Thanks in advance!

  • #2
    To align these two files, the encrypted file has to be on the left side. Use Swap to make that side the Left base folder.

    Then go to the Session menu -> Session Settings, Misc tab (Pro feature), and create a New (+) Alignment Override.

    Define left as (.*).id-(.*)
    and Define right as $1
    Aaron P Scooter Software

    Comment

    Working...
    X